CVE-2025-68325

In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: Fix incorrect qlen reduction in cakedrop In cakedrop, qdisctreereducebacklog is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cakeenqueue, assumes that the parent qdisc will enqueue t...

CVE-2025-68249

In the Linux kernel, the following vulnerability has been resolved: most: usb: hdmprobe: Fix calling putdevice before device initialization The early error path in hdmprobe can jump to errfreemdev before &mdev-;dev has been initialized with deviceinitialize. Calling putdevice&mdev-;dev there...

EUVD-2025-203476

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

EUVD-2025-203429

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

EUVD-2025-203413

Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Attackers can craft SVG files with script tags that execute when the file is viewed, potentially stealing user session information or performi...

CVE-2025-43523

creationtimestamp| type| source ---|---|--- 2025-12-12 23:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7mcvrjb2q...

WordPress Hippoo Mobile App for WooCommerce plugin <= 1.7.1 - Missing Authorization to Unauthenticated Limited File Write vulnerability

Missing Authorization to Unauthenticated Limited File Write vulnerability discovered by NumeX in WordPress Plugin Hippoo Mobile App for WooCommerce versions = 1.7.1...

CVE-2025-12084 vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-63067

creationtimestamp| type| source ---|---|--- 2025-12-09 15:25:37+00:00| seen| https://gist.github.com/Darkcrai86/7a2852d294125071f4b18d7e51d4847d...

EUVD-2025-199550

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions...

CLSA-2025-1764028069 sssd: Fix of CVE-2025-11561

CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...

EUVD-2025-138849

Malicious code in poglymer-ogmih-avg npm...

EUVD-2025-135812

Malicious code in teagod-rs5 npm...

EUVD-2025-146949

Malicious code in uinsu-lista-patumu npm...

EUVD-2025-143986

Malicious code in nabuf-otgigaf-dajafafi npm...

EUVD-2025-120826

Malicious code in venus-avior-hugo-epimetheus npm...

EUVD-2025-97848

Malicious code in iwan-pisang34-riris npm...

EUVD-2025-104344

Malicious code in iwan-taiwan18-breki npm...

EUVD-2025-79782

Malicious code in assistantgoat0xrequest npm...

EUVD-2025-82879

Malicious code in anxioushaddockz3n npm...